Your personal data belongs to you. This Privacy Policy explains exactly what phfin collects, why we collect it, how we protect it, and what rights you have as a player in the Philippines.
Effective Date: January 1, 2026 | Last Updated: January 1, 2026
This Privacy Policy applies to all users of the phfin platform, including visitors, registered players, and former account holders. It governs the collection, use, storage, and disclosure of personal information in accordance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines, and other applicable data protection regulations.
phfin ("we," "us," "our," or the "Platform") is committed to protecting the privacy and personal data of every player who uses our online gaming services. This Privacy Policy describes how phfin collects, processes, stores, shares, and safeguards your personal information when you access or use the phfin website, mobile platform, or any related services.
This policy applies to all personal data collected through your use of phfin, including data provided during account registration, identity verification, payment processing, gameplay, customer support interactions, and marketing communications. By creating a phfin account or using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.
If you do not agree with any part of this Privacy Policy, you must discontinue use of the phfin platform immediately. For questions or concerns regarding your personal data, you may contact our Data Protection Officer at the contact details provided in Section 14 of this policy.
phfin acts as the data controller for all personal information collected through the platform. As data controller, phfin determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable data protection laws, including the Data Privacy Act of 2012 and its Implementing Rules and Regulations.
phfin has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and applicable data protection legislation. You may contact the DPO directly at [email protected] for any privacy-related inquiries, requests, or complaints.
phfin collects personal data that is necessary for the provision of our gaming services, compliance with legal obligations, and the improvement of the player experience. The categories of personal data we collect include the following:
When you create a phfin account, we collect your full legal name, date of birth, residential address, email address, and Philippine mobile telephone number. This information is required to create and manage your account, verify your identity, and comply with our Know Your Customer (KYC) obligations under applicable anti-money laundering regulations.
As part of our KYC process, phfin may request copies of government-issued identification documents, proof of address, and proof of payment method ownership. Acceptable identification documents include a Philippine passport, driver's license, SSS ID, UMID, PhilHealth ID, or Voter's ID. These documents are collected solely for identity verification and regulatory compliance purposes.
phfin collects information related to your financial transactions on the platform, including deposit amounts, withdrawal requests, payment method details (such as GCash account numbers, PayMaya account details, or bank account information for BPI, BDO, Metrobank, and other participating institutions), transaction histories, and account balances. This data is necessary for processing payments, detecting fraud, and complying with financial regulations.
We collect data about your gaming activity on the phfin platform, including game history, wager amounts, win and loss records, session durations, and responsible gaming tool usage. This data is used to provide gaming services, detect problem gambling patterns, enforce responsible gaming policies, and improve the platform.
When you access phfin, we automatically collect certain technical data, including your IP address, device type and model, operating system, browser type and version, screen resolution, and unique device identifiers. We also collect log data such as access times, pages viewed, and referring URLs. This data is used for security monitoring, fraud prevention, and platform optimization.
If you contact phfin's customer support team, we collect records of your communications, including chat transcripts, email correspondence, and support ticket histories. This data is retained to resolve disputes, improve service quality, and maintain records of our interactions with you.
With your consent, phfin collects information about your marketing preferences, including your opt-in or opt-out status for promotional emails, SMS notifications, and push notifications. You may update your marketing preferences at any time through your account settings.
| DATA CATEGORY | EXAMPLES | PURPOSE | LEGAL BASIS |
|---|---|---|---|
| Identity Data | Name, DOB, address, email, mobile | Account creation, KYC | Contract, Legal obligation |
| Verification Docs | Passport, driver's license, utility bill | AML/KYC compliance | Legal obligation |
| Financial Data | GCash number, bank account, transactions | Payment processing, fraud detection | Contract, Legal obligation |
| Gameplay Data | Game history, wagers, session time | Service delivery, responsible gaming | Contract, Legitimate interest |
| Technical Data | IP address, device ID, browser type | Security, fraud prevention | Legitimate interest |
| Communications | Support chat, email, tickets | Customer service, dispute resolution | Contract, Legitimate interest |
| Marketing Prefs | Email opt-in, SMS consent | Promotional communications | Consent |
phfin processes your personal data for the following purposes:
phfin processes your personal data on the following legal bases as recognized under the Data Privacy Act of 2012 and applicable data protection principles:
phfin shares personal data with carefully selected third-party service providers who assist us in delivering our services. These include payment processors (GCash, PayMaya, and banking partners), game software providers, identity verification services, cloud hosting providers, and customer support platforms. All third-party service providers are contractually required to process personal data only on phfin's instructions and in accordance with applicable data protection laws.
phfin may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement agencies, and other government authorities where required by law, court order, or regulatory directive. Such disclosures are made only to the extent necessary to comply with the applicable legal obligation.
In the event of a merger, acquisition, restructuring, or sale of all or part of phfin's business, personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and any material changes to this Privacy Policy that may result from it.
phfin does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. Your personal information is used exclusively for the purposes described in this Privacy Policy.
phfin uses cookies and similar tracking technologies to enhance your experience on the platform, maintain session security, analyze usage patterns, and deliver relevant content. The types of cookies we use include:
You may manage your cookie preferences through your browser settings. Please note that disabling essential cookies may affect the functionality of the phfin platform.
phfin retains personal data for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. The following retention periods apply:
| DATA TYPE | RETENTION PERIOD | BASIS |
|---|---|---|
| Account and identity data | Duration of account + 5 years | AML/KYC legal obligation |
| Financial transaction records | 10 years from transaction date | Philippine financial regulations |
| Gameplay and activity data | Duration of account + 3 years | Legitimate interest, dispute resolution |
| Customer support records | 3 years from last interaction | Legitimate interest |
| Marketing consent records | Until consent withdrawn + 1 year | Consent accountability |
| Technical and device logs | 12 months from collection | Security and fraud prevention |
| Self-exclusion records | Permanently retained | Responsible gaming obligation |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with phfin's data disposal procedures.
phfin implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. Our security measures include:
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, phfin will notify the National Privacy Commission and affected players in accordance with the requirements of the Data Privacy Act of 2012 and its Implementing Rules and Regulations.
phfin primarily processes and stores personal data within the Republic of the Philippines. In certain circumstances, personal data may be transferred to and processed in other countries, for example where phfin uses cloud hosting services or third-party game providers whose servers are located outside the Philippines. Any such international transfers are carried out in accordance with the Data Privacy Act of 2012 and are subject to appropriate safeguards, including contractual data protection clauses that provide an equivalent level of protection to that afforded under Philippine law.
Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phfin. You may exercise any of these rights by contacting our Data Protection Officer at [email protected]. phfin will respond to all verified requests within thirty (30) calendar days.
Request a copy of the personal data phfin holds about you, including information on how it is being processed and with whom it has been shared.
Request correction of any inaccurate or incomplete personal data we hold about you. You may also update most account details directly through your phfin account settings.
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
Object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interest. We will cease processing unless we have compelling legitimate grounds.
Receive a copy of your personal data in a structured, commonly used, machine-readable format, and request that it be transmitted to another data controller where technically feasible.
File a complaint with the National Privacy Commission (NPC) if you believe phfin has processed your personal data in violation of the Data Privacy Act of 2012.
The phfin platform is strictly intended for adults aged twenty-one (21) years and above. phfin does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under the minimum age requirement, we will immediately close the associated account, delete the personal data, and void any associated transactions. If you believe that a minor has registered on the phfin platform, please contact our Data Protection Officer immediately at [email protected].
phfin reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or platform features. Any material changes will be communicated to registered players via email or in-platform notification at least fourteen (14) days before the changes take effect. The updated Privacy Policy will be published on the phfin website with a revised effective date. Your continued use of the platform following the effective date of any changes constitutes your acceptance of the updated Privacy Policy.
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by phfin, please contact our Data Protection Officer using the following details:
Data Protection Officer — phfin
Email: [email protected]
Response time: Within 30 calendar days of receiving a verified request.
If you are not satisfied with phfin's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. Information on how to file a complaint is available on the NPC's official website.
At phfin, data protection is not just a legal checkbox — it is a core part of how we operate. Here is what every Filipino player can count on when it comes to their personal information.
Every piece of data you send to phfin — from your login credentials to your GCash details — is protected by bank-grade 256-bit SSL/TLS encryption. Your information travels securely and cannot be intercepted in transit.
phfin fully complies with Republic Act No. 10173, the Data Privacy Act of 2012. We have appointed a registered Data Protection Officer and follow all NPC guidelines for the lawful collection and processing of personal data.
phfin does not sell, rent, or trade your personal information to third parties for commercial purposes — ever. Your data is used exclusively to deliver and improve our services, comply with regulations, and keep your account secure.
You have the right to access, correct, delete, and port your personal data at any time. Submit a request to our DPO and we will respond within 30 days. Your rights under the Data Privacy Act of 2012 are fully respected at phfin.
Receiving too many promos? You can opt out of all marketing communications at any time through your account settings or by contacting support. Opting out does not affect your ability to use phfin's gaming services.
phfin keeps your data only for as long as legally required or operationally necessary. Once the retention period expires, your data is securely deleted or anonymized — no indefinite storage, no unnecessary accumulation of personal information.
Your privacy is protected every step of the way at phfin. From the moment you register to every deposit, spin, and withdrawal, your personal data is handled with the highest standards of security and transparency. Join over a million Filipino players who trust phfin for a safe, fair, and exciting online gaming experience. Must be 21 or older to register and play.